allowedClasses the java.util.Set of java.lang.String-s that contains
the full-qualified names of the allowed classes.
Can be null (means not class is allowed).

trustedTemplates the java.util.List of java.lang.String-s that contains
template names (i.e., template root directory relative paths)
and prefix patterns (like "include/*") of templates
for which TemplateClassResolver.SAFER_RESOLVER will be
used (which is not as safe as OptInTemplateClassResolver).
The list items need not start with "/" (if they are, it
will be removed). List items ending with "*" are treated
as prefixes (i.e. "foo*" matches "foobar",
"foo/bar/baaz", "foowhatever/bar/baaz",
etc.). The "*" has no special meaning anywhere else.
The matched template name is the name (template root directory
relative path) of the template that directly (lexically) contains the
operation (like ?new) that wants to get the class. Thus,
if a trusted template includes a non-trusted template, the
allowedClasses restriction will apply in the included
template.
This parameter can be null (means no trusted templates).